$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf.cer File: fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf.cer (raw, json) Hash identifier: MVHWy302svDZXU0zytCIsK+rRHINtvo1p1frPQ71NIU= Subject key identifier: CD:24:FE:93:E1:21:99:12:AB:6F:D0:09:A9:45:59:E5:97:7D:1F:B7 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858439499C6B2B96D030B9EFF6D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Oct 2023 13:41:41 +0000 Certificate not after: Mon 19 Jan 2026 14:41:41 +0000 Subordinate resources: IP: 192.245.136.0/24 IP: 198.91.32.0 -- 198.91.41.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:94:99:c6:b2:b9:6d:03:0b:9e:ff:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 17 13:41:41 2023 GMT Not After : Jan 19 14:41:41 2026 GMT Subject: CN=fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2e:09:b9:ba:b2:76:8b:6e:21:97:ec:28:5e: 50:f5:da:66:a4:f2:f0:87:10:20:31:1a:70:2e:be: e5:56:37:b7:13:93:1b:2f:26:b1:26:6b:02:64:b5: fe:bb:ec:38:f1:37:b9:fb:d1:4e:14:5d:2e:c8:d9: 70:15:a2:a6:a9:da:c8:e9:51:cc:74:03:26:79:ee: c9:8d:54:f1:24:22:a5:e2:1d:90:3e:ef:03:30:2a: 95:f3:74:e8:38:4f:31:51:cf:69:9c:f9:f2:5f:8b: 53:a7:bd:52:44:ba:cb:dd:95:c5:9b:8b:73:fd:77: 32:0a:4a:31:01:13:ec:12:84:40:96:62:6f:14:7f: ab:7b:f8:34:b3:a7:5e:db:fa:4f:ad:32:7d:bd:b4: 99:b9:cd:9c:d4:80:06:da:86:3b:de:64:d2:8c:bb: b2:a3:13:3a:c9:2a:8d:44:b5:61:83:8d:3b:03:57: 38:37:6b:08:64:07:12:81:91:a6:ba:05:85:1f:43: 50:e2:12:91:40:ae:8a:32:1d:b5:e7:e9:a2:b3:7c: 5b:10:ff:48:90:75:14:bd:1b:d7:b8:7f:7c:48:b0: 32:f7:cf:88:5d:e1:6c:54:55:7d:dc:7a:f6:3f:7a: d7:06:52:4e:f3:0d:33:23:57:90:e4:09:cc:9f:1b: a3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:24:FE:93:E1:21:99:12:AB:6F:D0:09:A9:45:59:E5:97:7D:1F:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.245.136.0/24 198.91.32.0-198.91.41.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:70:78:91:61:d8:d4:99:74:b6:3f:43:75:5c:bb:80:3b:6b: f0:d2:80:77:17:c5:d8:5a:30:2b:e7:3e:84:36:f4:cf:fa:5c: 8a:00:b8:66:11:c2:78:01:a9:92:4d:38:77:7b:6b:ad:71:46: 5e:3d:08:56:fd:a3:73:cb:b9:0c:76:93:4c:b0:c2:b1:c7:3e: 88:b5:2a:a2:d3:4d:41:cf:52:47:7c:6a:22:16:54:7b:0a:49: 52:d1:8d:74:0f:50:9a:4f:03:66:c9:e4:6e:a5:70:76:b7:f8: 70:9f:98:a4:95:b9:92:ac:e1:a0:86:a7:37:09:63:1f:76:82: cb:5d:42:83:0c:69:33:58:7b:0f:5b:45:4c:c5:03:2a:e7:bc: b9:a7:74:aa:9d:d6:a3:e4:72:d5:92:14:19:c1:71:a9:24:7c: 66:ad:1d:9b:5f:19:23:d8:c2:99:52:03:d4:9d:1d:b1:69:1d: dc:b2:c4:f5:52:3f:39:f2:c4:f0:52:45:6b:71:1d:35:86:1d: 03:ac:92:d8:89:68:16:ba:25:9f:e3:7d:60:e8:25:0e:ec:4b: c3:db:d9:3a:cc:8c:24:e2:f0:35:1c:48:2a:26:b9:b8:98:e5: 73:db:99:0d:5e:2c:63:d9:54:6a:1f:df:1c:cf:52:e6:1c:55: d3:74:10:65 -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEOUmcayuW0DC57/bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTAxNzEzNDE0MVoXDTI2MDExOTE0NDE0MVowLzEtMCsGA1UEAxMk ZmE5M2YxYTEtOTA5OC00Yzc5LTlmZmMtOWZhZmU2YTNkZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji4JubqydotuIZfsKF5Q9dpmpPLwhxAgMRpw Lr7lVje3E5MbLyaxJmsCZLX+u+w48Te5+9FOFF0uyNlwFaKmqdrI6VHMdAMmee7J jVTxJCKl4h2QPu8DMCqV83ToOE8xUc9pnPnyX4tTp71SRLrL3ZXFm4tz/XcyCkox ARPsEoRAlmJvFH+re/g0s6de2/pPrTJ9vbSZuc2c1IAG2oY73mTSjLuyoxM6ySqN RLVhg407A1c4N2sIZAcSgZGmugWFH0NQ4hKRQK6KMh215+mis3xbEP9IkHUUvRvX uH98SLAy98+IXeFsVFV93Hr2P3rXBlJO8w0zI1eQ5AnMnxuj2QIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFM0k/pPhIZkSq2/QCalFWeWXfR+3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m YTkzZjFhMS05MDk4LTRjNzktOWZmYy05ZmFmZTZhM2RkYWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2ZhOTNmMWExLTkwOTgtNGM3OS05 ZmZjLTlmYWZlNmEzZGRhZi9mYTkzZjFhMS05MDk4LTRjNzktOWZmYy05ZmFmZTZh M2RkYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQDBADA9YgwDAMEBcZbIAMEAcZbKDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBD cHiRYdjUmXS2P0N1XLuAO2vw0oB3F8XYWjAr5z6ENvTP+lyKALhmEcJ4AamSTTh3 e2utcUZePQhW/aNzy7kMdpNMsMKxxz6ItSqi001Bz1JHfGoiFlR7CklS0Y10D1Ca TwNmyeRupXB2t/hwn5iklbmSrOGghqc3CWMfdoLLXUKDDGkzWHsPW0VMxQMq57y5 p3Sqndaj5HLVkhQZwXGpJHxmrR2bXxkj2MKZUgPUnR2xaR3cssT1Uj858sTwUkVr cR01hh0DrJLYiWgWuiWf431g6CUO7EvD29k6zIwk4vA1HEgqJrm4mOVz25kNXixj 2VRqH98cz1LmHFXTdBBl -----END CERTIFICATE-----Generated at Fri May 10 16:55:58 2024 by rpki-client on console-ams.rpki-client.org